Openbmc

openbmc

Vendor: Ibm • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-18849 1Ibm 9Openbmc Power System E1050 (9043 Mrx) FirmwarePower System L1022 (9786 22h) Firmware+6 more Sep 2, 2026 Aug 19, 2026 N/A· v4 6.8 MEDIUM· v3 N/A· v2 IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbi...Show more IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.Show less
CVE-2026-7254 1Ibm 1Openbmc Jun 17, 2026 May 27, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network users.
CVE-2024-35124 1Ibm 1Openbmc Jun 17, 2026 Aug 13, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability in the combination of the OpenBMC's FW1050.00 through FW1050.10, FW1030.00 through FW1030.50, and FW1020.00 through FW1020.60 default password and session management allow an attacker to gain administrati...Show more A vulnerability in the combination of the OpenBMC's FW1050.00 through FW1050.10, FW1030.00 through FW1030.50, and FW1020.00 through FW1020.60 default password and session management allow an attacker to gain administrative access to the BMC. IBM X-Force ID: 290674.Show less
CVE-2024-31916 1Ibm 1Openbmc Jun 17, 2026 Jun 27, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an unauthorized actor that bypasses authentication channels. IBM X-ForceID: 290026.